This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
File: VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json)
Hash identifier: oB4J71P2qfnYLmNJxW08auuMxnm6FlnudkaiNP6FCZc=
Subject key identifier: 82:1F:AC:2F:F5:C7:60:45:54:01:B5:7B:55:81:77:97:7D:57:A9:B1
Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Certificate serial: 0ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
Manifest number: 0AC7
Signing time: Thu 18 Dec 2025 19:04:29 +0000
Manifest this update: Thu 18 Dec 2025 19:04:28 +0000
Manifest next update: Thu 25 Dec 2025 19:04:28 +0000
Files and hashes: 1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: jj1LnjTPLEwIU4WHI4i9cdJBvF5fJ1lz2QnAOiIhcxM=)
2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: 0G9HtTLZBqQUwE8UGiq72iqUjTtI4Gz6+fEdMQN9vkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Validity
Not Before: Dec 18 19:04:28 2025 GMT
Not After : Dec 25 19:04:28 2025 GMT
Subject: CN=6944503d-93f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:55:17:7c:80:6a:10:3b:2b:53:0e:5d:de:
03:b3:27:c0:25:f2:f2:21:bd:99:db:a3:6e:ea:e7:
a1:0f:0f:c7:2b:fa:b4:c3:35:79:30:17:e8:9e:b2:
24:8d:30:4c:8b:9d:4e:8e:88:06:8d:0b:01:c4:dd:
14:2f:78:17:fc:df:1b:5d:c4:5c:a9:cb:ad:79:7b:
d1:72:c9:ac:9a:03:fd:c0:c1:a7:0f:21:29:38:fa:
68:77:0a:e4:b7:2b:66:5b:d7:07:7b:78:ae:3c:68:
a2:e5:ae:f2:be:ae:d1:74:6d:69:96:34:2e:32:2c:
7b:ba:70:b7:c0:96:f9:ef:e5:33:06:8d:41:58:40:
e5:0a:d0:25:ef:c5:37:ee:07:32:48:4b:6b:7c:d9:
73:6f:12:e7:77:45:39:62:98:7c:f3:3c:e1:18:10:
2b:c6:3c:7c:de:89:76:f7:fb:0d:95:9b:79:b4:5a:
a1:ec:cf:b6:3e:c9:91:84:7d:da:2a:91:a0:a8:3c:
2f:5f:07:bf:4d:a5:ae:f5:ea:ed:4f:a7:eb:85:03:
2e:9d:ee:57:d9:b9:fc:9d:c1:22:9e:cf:2a:b2:e7:
49:ff:92:6a:3d:b2:83:4b:74:ba:59:33:8c:68:8d:
16:3e:52:27:89:9b:9a:1e:9a:10:f0:13:03:14:b0:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1F:AC:2F:F5:C7:60:45:54:01:B5:7B:55:81:77:97:7D:57:A9:B1
X509v3 Authority Key Identifier:
keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:60:34:91:81:80:56:7a:a2:ee:a8:2b:e0:d5:f5:a5:ae:a4:
17:8a:99:9f:40:fb:54:53:c8:12:03:fa:57:af:42:61:43:a2:
e8:4f:a8:c2:3d:be:c0:94:cf:96:96:1f:e6:5e:4d:b6:d1:90:
1b:3e:6c:e9:31:56:47:0a:b3:6e:af:f9:80:16:31:46:d9:0a:
55:e2:c8:f5:9a:de:1b:87:d6:14:7d:26:b4:64:70:9c:ec:61:
af:f0:a5:ad:44:04:f1:3f:c1:2d:c7:66:0c:15:4c:24:6b:0e:
d7:cb:92:b2:f1:8f:01:f1:3c:f4:2f:04:f2:cd:b9:13:da:f2:
6e:dd:e3:28:84:9d:b9:c3:9d:22:3f:4e:de:7d:7f:c1:48:2f:
56:31:c6:12:10:7b:ee:8e:ca:cf:e2:6f:db:01:09:d2:88:21:
bb:d1:7b:3e:30:66:d5:de:8b:bd:df:31:85:fa:40:97:cc:f8:
5d:bf:74:0c:fc:f3:45:1c:40:59:3e:e1:d3:2c:f2:e2:33:27:
17:c1:99:f4:cc:6c:9c:18:11:ca:d0:5c:6c:b4:4d:01:a8:cf:
d4:ac:f3:d0:76:fb:59:6e:3d:29:28:5e:ef:65:d2:f7:f0:04:
06:0f:c9:14:26:93:d3:78:9f:41:f2:87:e8:e8:e0:16:d8:cb:
c4:58:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:26:28 2025 by rpki-client